Bump pex from 2.1.105 to 2.1.109

[dependabot]

Bumps pex from 2.1.105 to 2.1.109.

Release notes

Sourced from pex's releases.

pex 2.1.109

---

2.1.109

This release brings musllinux wheel support and a fix for a regression introduced in Pex 2.1.105 by #1902 that caused PEX_PATH= (an exported PEX_PATH with an empty string value) to raise an error in almost all use cases.

• Vendor latest packaging; support musllinux wheels. (#1937)
• Don't treat PEX_PATH= as . like other PATHS. (#1938)

pex 2.1.108

---

2.1.108

This release fixes a latent PEX boot performance bug triggered by requirements with large extras sets.

• Fix slow PEX boot time when there are many extras. (#1929)

pex 2.1.107

---

2.1.107

This release fixes an issue handling credentials in git+ssh VCS urls when creating locks.

• Fix locks for git+ssh with credentials. (#1923)

pex 2.1.106

---

2.1.106

This release fixes a long standing bug in handling direct reference requirements with a local version component.

• Unquote path component of parsed url requirements (#1920)

Changelog

Sourced from pex's changelog.

2.1.109

This release brings musllinux wheel support and a fix for a regression introduced in Pex 2.1.105 by #1902 that caused PEX_PATH= (an exported PEX_PATH with an empty string value) to raise an error in almost all use cases.

• Vendor latest packaging; support musllinux wheels. (#1937) PR [#1937](https://github.com/pantsbuild/pex/issues/1937) <https://github.com/pantsbuild/pex/pull/1937>_

• Don't treat PEX_PATH= as . like other PATHS. (#1938) PR [#1938](https://github.com/pantsbuild/pex/issues/1938) <https://github.com/pantsbuild/pex/pull/1938>_

2.1.108

This release fixes a latent PEX boot performance bug triggered by requirements with large extras sets.

• Fix slow PEX boot time when there are many extras. (#1929) PR [#1929](https://github.com/pantsbuild/pex/issues/1929) <https://github.com/pantsbuild/pex/pull/1929>_

2.1.107

This release fixes an issue handling credentials in git+ssh VCS urls when creating locks.

• Fix locks for git+ssh with credentials. (#1923) PR [#1923](https://github.com/pantsbuild/pex/issues/1923) <https://github.com/pantsbuild/pex/pull/1923>_

2.1.106

This release fixes a long standing bug in handling direct reference requirements with a local version component.

• Unquote path component of parsed url requirements (#1920) PR [#1920](https://github.com/pantsbuild/pex/issues/1920) <https://github.com/pantsbuild/pex/pull/1920>_

Commits

• bc29962 Prepare the 2.1.109 release. (#1942)
• 2768870 Optimize PexInfo import time. (#1941)
• 207d09d Vendor latest packaging; support musllinux wheels. (#1937)
• a2065ae Don't treat PEX_PATH= as . like other PATHS. (#1938)
• 1a1b9aa Extract an InterpreterConstraints type. (#1931)
• 1ebd92b Prepare the 2.1.108 release. (#1932)
• ff8ca0b Fix slow PEX boot time when there are many extras. (#1929)
• 4190736 Add a Zip utility for manipulating zip headers. (#1926)
• 5a48980 Prepare the 2.1.107 release. (#1925)
• 9491a45 Fix locks for git+ssh with credentials. (#1923)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)